Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-30996

Arbitrary File Upload Vulnerability in WordPress themes by Themify

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

Unrestricted Upload of File with Dangerous Type vulnerability in Themify Themify Sidepane WordPress Theme, Themify Themify Newsy, Themify Themify Folo, Themify Themify Edmin, Themify Bloggie, Themify Photobox, Themify Wigi, Themify Rezo, Themify Slide allows Upload a Web Shell to a Web Server.This issue affects Themify Sidepane WordPress Theme: from n/a through 1.9.8; Themify Newsy: from n/a through 1.9.9; Themify Folo: from n/a through 1.9.6; Themify Edmin: from n/a through 2.0.0; Bloggie: from n/a through 2.0.8; Photobox: from n/a through 2.0.1; Wigi: from n/a through 2.0.1; Rezo: from n/a through 1.9.7; Slide: from n/a through 1.7.5.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Themify Themify Sidepane WordPress Theme

    through 1.9.8

  • Themify Themify Newsy

    through 1.9.9

  • Themify Themify Folo

    through 1.9.6

  • Themify Themify Edmin

    through 2.0.0

  • Themify Bloggie

    through 2.0.8

  • Themify Photobox

    through 2.0.1

  • Themify Wigi

    through 2.0.1

  • Themify Rezo

    through 1.9.7

  • Themify Slide

    through 1.7.5

References 9

patchstack.com